> For the complete documentation index, see [llms.txt](https://oten.gitbook.io/identity-support/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oten.gitbook.io/identity-support/user-guide/organization-admin-app/business-owner-default-authority/roles-and-permissions/assign-role-to-user-in-organization.md).

# Assign role to user in Organization

Roles determine what a user can see and do within the Oten system. The **Assign role** feature allows you, as an Admin, to grant users specific permissions within a defined scope, such as across the entire organization or within a specific Workspace.

This ensures that users have access only to what they need, enhancing security and making management more effective.

***

#### **How to assign a new role to a user** <a href="#how-to-assign-a-new-role-to-a-user" id="how-to-assign-a-new-role-to-a-user"></a>

This action is performed directly from a user's profile page to ensure it is intuitive and context-specific.

**Steps:**

1. **Navigate to the user detail page:** From the account list, find and open the profile of the user to whom you want to assign a role.
2. **Initiate the role assignment:** On the user's profile page, find and click the **Assign role** button.
3. A setup window will appear. Here, you will complete two main steps:
   * **Step 1: Choose a role**
     * Click the dropdown menu to view and select the role you want to assign (e.g., Editor, Viewer, Admin).
     * **Preview permissions:** As soon as you select a role, a read-only summary of its associated permissions will automatically display. This helps you confirm exactly what the user will be able to do with this role.
     * ***Note:*** Roles that the user has already been granted will not appear in this list to prevent duplicate assignments.
   * **Step 2: Select a scope**
     * This is where you decide **where** this role will be effective.
     * Depending on your organization's structure, options may include the entire Organization, a specific Org unit, or a single Workspace.
4. **Finish:** After selecting the role and scope, click the **Assign** button to confirm.